macmeister

No problem. I’m just using other methods to require a login to access any page on the public facing website. Maybe this feature will be added some day, or there is a way for me to blacklist all IPs, requiring a login… I think this use case of development sites or members only, fits in-line with Hide My’s purpose.

I may not have been clear. I don’t wish to hide the login page. I wish to hide EVERY page of the entire website including the home page, with the WP login. As powerful as Hide My WP Ghost is, I figured it would be fairly easy to do this. If this is available now or in the future, please consider adding a checkbox or how to.

You rock @mtgamberwesbitedesign
Thanks for the info and passing it onto the BB Powerpack folk!

@mtgamberwesbitedesign
I see them accessing the rogue file in the log which is a bummer, but then I see Wordfence, so it likely blocked it. Yay. I did hide the IPs below. Not sure why I’d protect the criminal other than this way they can’t google there IP and find this post…? LOL

XX.XXX.XXX.111 - - [25/May/2019:01:09:32 +0000] "GET / HTTP/1.0" 301 543 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3538.77 Safari/537.36"
XX.XXX.XXX.111 - - [25/May/2019:01:09:32 +0000] "GET / HTTP/1.0" 200 13747 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3538.77 Safari/537.36"
XX.XX.XX.XX - - [25/May/2019:01:09:34 +0000] "POST /?wordfence_syncAttackData=XXXXXXXXXX.XXXX HTTP/1.0" 200 171 "https://xxxxxxxx.com/?wordfence_syncAttackData=XXXXXXXXXX.XXXX" "WordPress/5.1.1; https://xxxxxxxx.com"
XX.XXX.XXX.111 - - [25/May/2019:01:09:33 +0000] "POST / HTTP/1.0" 200 343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3538.77 Safari/537.36"
XX.XXX.XXX.111 - - [25/May/2019:01:09:35 +0000] "POST / HTTP/1.0" 200 343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3538.77 Safari/537.36"
XX.XXX.XXX.111 - - [25/May/2019:01:09:36 +0000] "GET /wp-content/uploads/bbpowerpack/index.php HTTP/1.0" 200 532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3538.77 Safari/537.36"

@mtgamberwesbitedesign Great question.
I reviewed 4 other sites with powerpack and cannot find where this file shows up in any of the others. They all had the same directory as yours and mine, but no index.php suspicious file Wordfence found on this particular one. I have removed the file and still not sure how it got there. Hopefully I removed it in time. If not, there will be more cleanup… It is also possible that the file was uploaded via a vulnerability, but was unable to execute with Wordfence or Cloudways firewalls.

I just spotted this one as well. Thanks for the post and feedback! Still reviewing possible effects.

Any alternatives? I wonder if the developer has just abandoned… Unfortunate, and a great tool.

FYI: Warning most prominent in Chrome.

Thank you thank you thank you!
I tried all 3 just in case, and it appears to have worked!
Not sure which did it: Term counts, then Expired Transients, then WC Transients in version 2.8.1

Any cure for this double ampersand issue, placing javascript in WP? Using Genesis I can place the code in the header properly, but then things don’t work as they should…

I too am anxious to see what functions or classes to use if I want to hard-code WP UI into a template (collapsibles for me). If no response here, I suppose I’ll have to turn it on, make some shortcodes, then hard-code those classes and such… Official help here would be nice, because I know there’s probably another function or switch to turn it on for a particular page when no shortcodes exist.

Same issue here. Fortunately it still works. Received these exact errors on 3.4 and now 3.4.2. Have they cured this? Is an alternative necessary? Still digging…

This appears to be a bug that just popped up for me after the update. I did notice that one can still tab into the tags field when clicking edit. Hopefully this will be fixed in the next version…?

Did anyone find a solution? We simply hacked the tabs, and removed the option for the others… But now to apply it again in the newest version yet. Please consider making this a checkbox P2 folk. A default or way to disable others would be SWEET within the admin! Adding Peter’s hack appears to work as well.

I’m glad to see I’m not the only one… Hopefully the minor CSS tweak will make it in soon. Weird, how on some browsers I get it, and others do not.